CVE-2026-2441

This flaw is a “use after free” problem, meaning the browser can accidentally refer to memory that should no longer exist. In everyday terms, it’s like following a recipe step using ingredients from a bin that was already thrown away—under the right conditions, an attacker can trick the system into behaving in a dangerous way. A specially crafted web page can trigger it and run code inside the browser’s sandbox.

This matters to you if you use or manage computers running Google Chrome (and also Microsoft Edge, which shares browser technology) for day-to-day work like email, web apps, or browsing. The issue affects Google Chrome prior to 145.0.7632.75, and it can also affect Microsoft Edge as stated in the affected products. If employees open untrusted links or browse the web normally, you’re exposed.

This is RED: attackers are already exploiting it in the wild, there’s a public exploit available, and public reporting indicates “itw” (in-the-wild). With sustained attention and a known affected issue listed as a known exploited vulnerability, you should treat this as an urgent update—don’t wait for a routine patch cycle.